PT-2022-4329 · Linux+4 · Linux Kernel+4

Published 2022-06-06 · Updated 2023-04-12 · CVE-2022-1975

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a sleep-in-atomic bug in the /net/nfc/netlink.c component of the Linux kernel. This bug allows an attacker to crash the Linux kernel by simulating a NFC device from user-space. The vulnerability can be exploited by a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-248

Related Identifiers

BDU:2022-05188

CVE-2022-1975

DLA-3065-1

DSA-5161-1

DSA-5173-1

OESA-2022-1730

OPENSUSE-SU-2022:2173-1

OPENSUSE-SU-2022:2177-1

OPENSUSE-SU-2022_2111-1

OPENSUSE-SU-2022_2172-1

OPENSUSE-SU-2022_2173-1

SUSE-SU-2022:2077-1

SUSE-SU-2022:2080-1

SUSE-SU-2022:2082-1

SUSE-SU-2022:2103-1

SUSE-SU-2022:2104-1

SUSE-SU-2022:2111-1

SUSE-SU-2022:2116-1

SUSE-SU-2022:2172-1

SUSE-SU-2022:2173-1

SUSE-SU-2022:2177-1

SUSE-SU-2022:2393-1

SUSE-SU-2022:2629-1

USN-5518-1

USN-5560-1

USN-5560-2

USN-5562-1

USN-5564-1

USN-5582-1

USN-6001-1

USN-6013-1

USN-6014-1

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Suse

Ubuntu

References · 371

• https://github.com/torvalds/linux/commit/4071bf121d59944d5cd2238de0642f3d7995a997 · Patch
• https://ubuntu.com/security/CVE-2023-26607 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-29900 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-28712 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5560-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-3659 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2022-1730 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5582-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-28713 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-20132 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-4662 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-39188 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6014-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-36516 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2022:2629-1 · Vendor Advisory